CVE

Id
52976  
CVE No.
CVE-2011-5064  
Status
Candidate  
Description
DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.  
Phase
Assigned (20120114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561354 52976 CVE-2011-5064 CONFIRM:http://svn.apache.org/viewvc?view=rev&rev=1087655  View
561355 52976 CVE-2011-5064 CONFIRM:http://svn.apache.org/viewvc?view=rev&rev=1158180  View
561356 52976 CVE-2011-5064 CONFIRM:http://svn.apache.org/viewvc?view=rev&rev=1159309  View
561357 52976 CVE-2011-5064 CONFIRM:http://tomcat.apache.org/security-5.html  View
561358 52976 CVE-2011-5064 CONFIRM:http://tomcat.apache.org/security-6.html  View
561359 52976 CVE-2011-5064 CONFIRM:http://tomcat.apache.org/security-7.html  View
561360 52976 CVE-2011-5064 DEBIAN:DSA-2401  View
561361 52976 CVE-2011-5064 URL:http://www.debian.org/security/2012/dsa-2401  View
561362 52976 CVE-2011-5064 HP:HPSBST02955  View
561363 52976 CVE-2011-5064 URL:http://marc.info/?l=bugtraq&m=139344343412337&w=2  View
561364 52976 CVE-2011-5064 REDHAT:RHSA-2011:1845  View
561365 52976 CVE-2011-5064 URL:http://www.redhat.com/support/errata/RHSA-2011-1845.html  View
561366 52976 CVE-2011-5064 REDHAT:RHSA-2012:0074  View
561367 52976 CVE-2011-5064 URL:http://rhn.redhat.com/errata/RHSA-2012-0074.html  View
561368 52976 CVE-2011-5064 REDHAT:RHSA-2012:0075  View
561369 52976 CVE-2011-5064 URL:http://rhn.redhat.com/errata/RHSA-2012-0075.html  View
561370 52976 CVE-2011-5064 REDHAT:RHSA-2012:0076  View
561371 52976 CVE-2011-5064 URL:http://rhn.redhat.com/errata/RHSA-2012-0076.html  View
561372 52976 CVE-2011-5064 REDHAT:RHSA-2012:0077  View
561373 52976 CVE-2011-5064 URL:http://rhn.redhat.com/errata/RHSA-2012-0077.html  View
561374 52976 CVE-2011-5064 REDHAT:RHSA-2012:0078  View
561375 52976 CVE-2011-5064 URL:http://rhn.redhat.com/errata/RHSA-2012-0078.html  View
561376 52976 CVE-2011-5064 REDHAT:RHSA-2012:0325  View
561377 52976 CVE-2011-5064 URL:http://rhn.redhat.com/errata/RHSA-2012-0325.html  View
561378 52976 CVE-2011-5064 SUSE:SUSE-SU-2012:0155  View
561379 52976 CVE-2011-5064 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html  View
561380 52976 CVE-2011-5064 SUSE:openSUSE-SU-2012:0208  View
561381 52976 CVE-2011-5064 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html  View
561382 52976 CVE-2011-5064 SECUNIA:57126  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25545 JVNDB-2012-001252 Support Incident Tracker の incident_attachments.php における任意のコードを実行される脆弱性 Support Incident Tracker の incident_attachments.php には、任意のコードを実行される脆弱性が存在します。 CVE-2011-5069 52976 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001252.html  View